[PR #602] [MERGED] fix: Harden client-side security and GitHub Actions GITHUB_TOKEN perm… #1208

New issue

Closed

opened 2026-03-15 15:58:33 +03:00 by kerem · 0 comments

kerem commented

2026-03-15 15:58:33 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/flyimg/flyimg/pull/602
Author: @sadok-f
Created: 1/14/2026
Status: ✅ Merged
Merged: 1/14/2026
Merged by: @sadok-f

Base: main ← Head: issue#601

📝 Commits (1)

b0ac9e4 fix: Harden client-side security and GitHub Actions GITHUB_TOKEN permissions

📊 Changes

3 files changed (+68 additions, -8 deletions)

View changed files

📝 .github/workflows/cd.yml (+8 -0)
📝 .github/workflows/ci.yml (+3 -0)
📝 web/js/main.js (+57 -8)

📄 Description

Harden client-side security and GitHub Actions GITHUB_TOKEN permissions
closes #601
related to alerts triggered in the code scanning section https://github.com/flyimg/flyimg/security/code-scanning

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/flyimg/flyimg/pull/602 **Author:** [@sadok-f](https://github.com/sadok-f) **Created:** 1/14/2026 **Status:** ✅ Merged **Merged:** 1/14/2026 **Merged by:** [@sadok-f](https://github.com/sadok-f) **Base:** `main` ← **Head:** `issue#601` --- ### 📝 Commits (1) - [`b0ac9e4`](https://github.com/flyimg/flyimg/commit/b0ac9e47a70fed69965c08a67482559172de179d) fix: Harden client-side security and GitHub Actions GITHUB_TOKEN permissions ### 📊 Changes **3 files changed** (+68 additions, -8 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/cd.yml` (+8 -0) 📝 `.github/workflows/ci.yml` (+3 -0) 📝 `web/js/main.js` (+57 -8) </details> ### 📄 Description Harden client-side security and GitHub Actions GITHUB_TOKEN permissions closes #601 related to alerts triggered in the code scanning section https://github.com/flyimg/flyimg/security/code-scanning --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>